> DOUBLEBIT

Self-hosted. End-to-end encrypted. Yours.

Now at v0.1.18. 27 done · 6 still to build.

NEXT, IN ORDER

• [ ]
  YubiKey unlock and OpenPGP on YubiKey

  Unlock the app with your YubiKey (FIDO2), and sign with an OpenPGP key that never leaves it.

• [ ]
  Post-quantum status in the app

  Show on each chat’s Verify screen that it is protected by PQXDH and the post-quantum Triple Ratchet.

• [ ]
  Voice notes

  Hold to record, encrypted like everything else.

• [ ]
  Location sharing

  Send where you are, once or for a while.

• [ ]
  Voice and video calls

  The server already hands out the relay (TURN) details calls need. Until then the app says “coming soon”.

• [ ]
  Google push (optional, last)

  An empty wake-up ping through Firebase, with no sender or text, only if the background connection proves unreliable.

DONE

• [x]
  Take photos in the chatv0.1.19

  CAMERA in a chat opens the phone’s camera and sends the picture straight away.

• [x]
  Photos without hidden datav0.1.19

  Every photo you send (camera or gallery, GIFs too) has its metadata removed first: no GPS location, phone model or time. Photos are also shrunk to a sharp 2560 px. FILE still sends a file exactly as it is.

• [x]
  New link: doublebit.tail879299.ts.netv0.1.19

  Installed apps move to the new address by themselves, after checking it’s really the same server. The old link keeps working meanwhile.

• [x]
  Screen lock fixedv0.1.17

  Using the photo picker or share sheet no longer leaves the app unlocked for minutes afterwards.

• [x]
  Now called DoubleBitv0.1.15

  New name everywhere you see it; installed apps update and stay linked.

• [x]
  Bigger desktop iconv0.1.15

  The green bubble fills the icon on the taskbar and desktop.

• [x]
  Updates before linkingv0.1.14

  A computer that isn’t linked yet, or was unlinked, still gets updates.

• [x]
  Updates itselfv0.1.12

  Phone: one tap installs the new version from your server (checked against this app’s signing key). Desktop: downloads in the background and installs on restart, only if signed with your build key.

• [x]
  Alerts only when it mattersv0.1.12

  Pings only for new messages and reactions to your messages, never for read receipts, typing or your own devices. Blocked and muted people stay quiet.

• [x]
  Our icon in notificationsv0.1.12

  The green bubble everywhere, and the “connected” notice can be hidden.

• [x]
  OpenPGP identityv0.1.9

  Make a key on your phone or import your own. It signs your handle, server and Signal key, and contacts see it on their Verify screen, with a warning if it ever changes.

• [x]
  YubiKey detectionv0.1.9

  Tap or plug in a YubiKey to see its model, firmware and which features are on.

• [x]
  Photo viewerv0.1.9

  Tap a photo to open it full screen: pinch to zoom, drag, double tap, X to close.

• [x]
  Chat text zoomv0.1.9

  Pinch a chat to change its text size (also under Appearance).

• [x]
  Unlinking signs the desktop outv0.1.9

  An unlinked PC goes straight back to the link screen.

• [x]
  Reliable QR codesv0.1.6

  Link and safety codes scan first time, in any light.

• [x]
  Desktop app for Windows and Linuxv0.1.5

  Links to your phone by QR code. Each device has its own keys and gets copies of what you send.

• [x]
  Bit Lock app iconv0.1.5

  A second app icon to choose from.

• [x]
  Fingerprint unlockv0.1.3

  Erasing your account needs your phone lock too.

• [x]
  QR safety-number checkv0.1.3

  Scan a contact’s code to prove nobody is in the middle.

• [x]
  Alerts while the app is closedv0.1.3

  A background connection to your own server. No Google push.

• [x]
  Encrypted backupsv0.1.3

  Export and restore your chats with a 30-digit passphrase.

• [x]
  Server watchdogv0.1.3

  Restarts the server or the Funnel if either stops.

• [x]
  Post-quantum encryptionv0.1.2

  Chats start with PQXDH (X25519 + ML-KEM) and keep running Signal’s Triple Ratchet: fresh ML-KEM secrets are mixed into the keys alongside the classic X25519 ratchet, so recorded messages stay safe even against a future quantum computer. Checked by the tests on every build.

• [x]
  Android appv0.1.2

  Chats, groups, photos and files, reactions, read receipts, typing, disappearing messages, invites and app lock. Keys are sealed by the Android Keystore.

• [x]
  App icon follows your colourv0.1.2

  The launcher icon matches the Appearance colour, including black and white.

• [x]
  Self-hosted encrypted serverv0.1.1

  Signal’s own encryption (PQXDH + Double Ratchet). Invite-only accounts; messages are deleted once delivered and the server never sees what they say.